THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19288 (MEDIUM 5.3) — A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libr

[NVD] CVE-2026-19288 (MEDIUM 5.3) — A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libr

highnvdPublished 2026-08-08

CVE-2026-19288 CVSS: 5.3 MEDIUM Published: 2026-08-08T14:16:24.063

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to path traversal. The attack needs to b

Indicators of compromise

db1d0cc4cd52589116360428b7504fd0ca748b3esha1
CVE-2026-19288cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19288